RAVINDRA KUMAR
Noida
Summary
Information Security and Infrastructure Professional with 7+ years of experience in cybersecurity operations, Data Loss Prevention (DLP), Third-Party Risk Management (TPRM), risk assessments, vulnerability management, and compliance support. Hands-on experience with enterprise DLP policy management, security incident investigation, Linux administration, vendor control-gap analysis, and ISO 27001 / SOC 2 support across on-premises, cloud, and hybrid environments.
Overview
2
2
Languages
1
1
Certification
13
13
years of professional experience
Work History
Cyber Security Analyst
American Express
Gurugram
12.2024 - Current
- Manage Third-Party Risk Management (TPRM) activities and assess vendor alignment with security policies, regulatory expectations, and enterprise risk frameworks.
- Conduct vendor risk assessments, control-gap analysis, and remediation tracking aligned with ISO 27001 and applicable security practices.
- Coordinate with Cybersecurity, Procurement, Legal, and Compliance stakeholders to support third-party risk oversight and mitigation.
- Perform manual and tool-assisted assessments using Satoshi, BitSight, Black Kite, ProcessUnity, and ServiceNow.
- Classify assessment findings as Critical, High, Moderate, or Low and prepare weekly security and risk-potence reports.
- Support SOC 2 activities through evidence collection, control validation, and remediation-gap analysis.
Senior Technical Engineer
Data Resolve Technologies
Noida
12.2020 - 12.2024
- Implemented and supported enterprise DLP and information-protection solutions across endpoint, email, network, and cloud environments.
- Created and maintained policies for sensitive information, including PII, financial data, and confidential business information.
- Investigated DLP alerts and policy violations; supported incident triage, remediation, and insider-risk investigations.
- Worked with business teams to tune policies, reduce false positives, and improve DLP effectiveness.
- Conducted data-leakage risk assessments and supported ISO 27001, SOC 2, GDPR, and internal security-policy initiatives.
- Generated DLP metrics, dashboards, and management reports; collaborated with IT, Legal, HR, and Compliance teams.
- Administered RHEL, CentOS, and Ubuntu across on-premises, cloud, and virtualized environments; installed and troubleshot Java, Apache Tomcat, MongoDB, PostgreSQL, Redis, and InfluxDB.
- Worked with InDefend, Forepoint, Netskope, Microsoft Purview DLP, Microsoft Defender, endpoint DLP, data classification, and information-protection capabilities.
Deployment & Support Engineer
Data Resolve Technologies
Noida
12.2016 - 12.2019
- Installed and supported DLP agents across Linux, Windows, and macOS endpoints; created policies and applied them to users and groups.
- Provided L1/L2 technical support, troubleshot endpoint-security issues, and managed tickets within defined SLAs.
- Coordinated with development teams, trained support staff and partners, and evaluated support-team and partner capabilities.
- Created product manuals and demonstrated DLP dashboards and product functionality.
System Administrator
HCL Infosystems Ltd.
Noida
01.2014 - 01.2016
- Delivered L2/L3 support for Windows, Linux, and macOS, resolving hardware, software, and network issues within SLA targets.
- Managed Active Directory, user access, Group Policy, endpoint security, OS deployment, patching, and software installation.
- Troubleshot VPN, LAN/WAN, DNS, DHCP, and remote-connectivity issues using RDP, SSH, and remote-support tools.
- Coordinated with infrastructure teams and vendors on incident resolution, asset management, and system performance.
Education
BCA – Bachelor - Computer Applications
Diploma - Electronics & Telecommunication
Higher Secondary (I.Sc.) -
Bihar Intermediate Education Board
PatnaMatriculation -
Bihar Education Board
PatnaSkills
- SECURITY & RISK
- DLP
- Insider Risk
- TPRM
- Vendor Risk Assessments
- Vulnerability Assessment
- Risk Ratings
- Remediation Tracking
- GRC & COMPLIANCE
- ISO 27001
- SOC 2
- Control Gap Analysis
- Audit Evidence
- Security Policies
- Risk Reporting
- PLATFORMS & TOOLS
- ProcessUnity
- ServiceNow
- Satoshi
- BitSight
- Black Kite
- InDefend
- Forepoint
- Netskope
- Microsoft Purview DLP
- INFRASTRUCTURE
- RHEL
- CentOS
- Ubuntu
- Windows
- MacOS
- Active Directory
- Cloud / Virtualization
- Apache Tomcat
- Java
- DATABASES & OPERATIONS
- PostgreSQL
- MongoDB
- Redis
- InfluxDB
- Microsoft Defender
- SIEM Monitoring
- Incident Management
- SLA / Ticketing
- ServiceNow ticketing
- Risk management
- Security compliance
- Vendor management
- Incident response
- Linux administration
SLA / Ticketinge
Languages
English
Advanced
C1
Hindi
Proficient
C2
Certification
- Red Hat Certified System Administrator (RHCSA), Linux 6 – 94%
- Red Hat Certified Engineer (RHCE), Linux 6 – 78%
- ISO 27001 Lead Implementer / Auditor (please verify exact certificate title and edition)
Accomplishments
- Reduced DLP false-positive alerts by 40% through policy tuning and rule optimization.
- Supported deployment of InDefend DLP policies across 25,000+ endpoints.
- Improved incident-response efficiency by 30% through process automation and playbook deployment.
- Received individual/team recognition for DLP rollouts supporting organizations including Navy, IAF, South Indian Bank, Muthoot Finance, SSB, and Cleartrip.
Timeline
Cyber Security Analyst
American Express
12.2024 - Current
Senior Technical Engineer
Data Resolve Technologies
12.2020 - 12.2024
Deployment & Support Engineer
Data Resolve Technologies
12.2016 - 12.2019
System Administrator
HCL Infosystems Ltd.
01.2014 - 01.2016
BCA – Bachelor - Computer Applications
Diploma - Electronics & Telecommunication
Higher Secondary (I.Sc.) -
Bihar Intermediate Education Board
Matriculation -
Bihar Education Board
Work Preference
Work Type
Full timeLocation Preference
HybridLocation: Noida, India
Open to relocation: Yes